---
title: "Access Control — AVCodex Docs"
description: "Access Control — AVCodex documentation for AV integrators, programmers, and ops teams."
lang: en
json-ld:
---

[](/)

Solutions

[Pricing](/pricing)[The Signal](/blog)[Resources](/resources)

Learn

[Free AI Assessment](/scorecard)[Get Started →](/pricing)

[Documentation Home](/docs)

Guides 

Getting Started

-   [The Alchemist Copilot](/docs/guides/the-alchemist-copilot)
-   [Choosing a Model](/docs/guides/choosing-a-model)
-   [Skills & Templates](/docs/guides/skills-and-templates)
-   [Pricing & Usage](/docs/guides/pricing-and-usage)
-   [Understanding Tokens](/docs/guides/understanding-tokens)
-   [Maximize AVCodex Capabilities](/docs/guides/maximize-avcodex-capabilities)

Knowledge & Memory

-   [How Knowledge Sources Work](/docs/guides/how-knowledge-sources-work)
-   [Knowledge Retrieval Settings](/docs/guides/knowledge-retrieval-settings)
-   [User Memory](/docs/guides/user-memory)
-   [Consumer Brain](/docs/guides/consumer-brain)

Agent Capabilities

-   [Image Recognition](/docs/guides/image-recognition)
-   [Image Generation](/docs/guides/image-generation)
-   [Video Generation](/docs/guides/video-generation)
-   [Deep Research and Deep Thinking](/docs/guides/deep-research-and-deep-thinking)
-   [Heartbeat (Proactive AI Outreach)](/docs/guides/heartbeat-proactive-ai-outreach)
-   [Database Connections](/docs/guides/database-connections)
-   [Agent-to-Agent Links](/docs/guides/agent-to-agent-links)
-   [Message Tagging](/docs/guides/message-tagging)
-   [Lead Generation Forms](/docs/guides/lead-generation-forms)
-   [Multilingual Apps](/docs/guides/multilingual-apps)
-   [Understanding Evaluations](/docs/guides/understanding-evaluations)

Design & Experience

-   [Style Studio](/docs/guides/style-studio)
-   [Component Studio](/docs/guides/component-studio)
-   [HQ Profile](/docs/guides/hq-profile)
-   [Multiplayer Chat](/docs/guides/multiplayer-chat)
-   [Circles](/docs/guides/circles)
-   [Desktop Agent](/docs/guides/desktop-agent)

Voice & Phone

-   [Phone Numbers](/docs/guides/phone-numbers)
-   [Outbound Calling](/docs/guides/outbound-calling)
-   [Voice Cloning](/docs/guides/voice-cloning)

Publish & Share

-   [Embed Chat Widget](/docs/guides/embed-chat-widget)
-   [Custom Domains](/docs/guides/custom-domains)
-   [PWA Installation](/docs/guides/pwa-installation)
-   [AVCodex Sites](/docs/guides/avcodex-sites)
-   [Embed on Kajabi](/docs/guides/embed-on-kajabi)
-   [How to Use AVCodex with Claude Code](/docs/guides/how-to-use-avcodex-with-claude-code)

Monetization & Access

-   [Selling Access](/docs/guides/selling-access)
-   [Consumer Monetization](/docs/guides/consumer-monetization)
-   [Access Control](/docs/guides/access-control)
-   [Bring Your Own Auth](/docs/guides/bring-your-own-auth)
-   [Clever SSO for Schools](/docs/guides/clever-sso-for-schools)

Analytics & Operations

-   [Analytics & Chat History](/docs/guides/analytics-and-chat-history)
-   [Performance Dashboard](/docs/guides/performance-dashboard)
-   [Programmatic Usage Stats](/docs/guides/programmatic-usage-stats)
-   [Session Lifecycle Webhooks](/docs/guides/session-lifecycle-webhooks)
-   [Audit Logs](/docs/guides/audit-logs)

Teams & White-Label

-   [Team Management](/docs/guides/team-management)
-   [Enterprise Whitelabel](/docs/guides/enterprise-whitelabel)

Alchemist Platform

-   [Alchemist Tickets](/docs/guides/alchemist-tickets)
-   [Alchemist Getting Started](/docs/guides/alchemist-getting-started)
-   [Alchemist Working with Tickets](/docs/guides/alchemist-working-with-tickets)
-   [Alchemist Local Development](/docs/guides/alchemist-local-development)

Alchemist Operations

-   [Alchemist Environment Variables](/docs/guides/alchemist-environment-variables)
-   [Alchemist Deploys and Domains](/docs/guides/alchemist-deploys-and-domains)
-   [Alchemist Self-Healing](/docs/guides/alchemist-self-healing)

Alchemist API & Automation

-   [Alchemist API Keys](/docs/guides/alchemist-api-keys)
-   [Alchemist MCP Server](/docs/guides/alchemist-mcp-server)
-   [Alchemist Pipeline Configuration](/docs/guides/alchemist-pipeline-configuration)
-   [Alchemist Pipeline Permutations](/docs/guides/alchemist-pipeline-permutations)

Developer Platform

-   [Building Custom MCP Servers](/docs/guides/building-custom-mcp-servers)
-   [Consumer OAuth for Custom MCP Servers](/docs/guides/consumer-oauth-for-custom-mcp-servers)

AVCodex MCP Server

-   [Overview](/docs/guides/overview)
-   [MCP Reference](/docs/guides/mcp-reference)
-   [Setup & Installation](/docs/guides/setup-and-installation)
-   [Authentication](/docs/guides/authentication)
-   [Tools Reference](/docs/guides/tools-reference)
-   [Common Workflows](/docs/guides/common-workflows)
-   [Rate Limits](/docs/guides/rate-limits)

Custom Actions 

Pro Actions 

API 

Builder API 

Agentic Commerce (ACP) 

Integrations 

[Docs](/docs)/ Guides / Monetization & Access 

# Access Control

Last updated · MAR 2026 · [Read as Markdown](/docs/guides/access-control.md)

Decide who gets to use your AVCodex agent and how they authenticate. Pick from four modes, from fully open (a QR code in a conference room anyone can scan) to strict email whitelisting (your internal programmer team only).

Access Control determines who can chat with the agent. Pick the right mode and the rest of the experience falls into place.

## [The Four Auth Modes# ](#the-four-auth-modes)

Mode

User Experience

Best For

**Open**

No authentication. Users chat anonymously.

Public-facing helpdesk QR codes in conference rooms, demos, broad reach.

**Encouraged**

Signup form shown but dismissible. Users can chat as guests.

Lead capture for a dealer-facing agent without blocking access.

**Required**

Users must sign in before chatting.

Agents with sensitive content or user-specific features (per-tech ticket lookup).

**Restricted**

Users must sign in with a pre-approved email.

Internal AV ops tools, programmer-only assistants, single-client workspaces.

## [Configuring Access Control# ](#configuring-access-control)

**1\. Open Access Settings**

Open your agent's **Build** page, then the **Access** tab.

**2\. Select an Auth Mode**

Pick one: Open, Encouraged, Required, or Restricted.

**3\. Configure Restrictions (Restricted mode only)**

If you picked Restricted, set:

-   **Allowed Domain**: an email-domain filter (e.g. `yourintegrator.com`). Only matching emails can access the agent.
-   **Allowed Emails**: a comma-separated list of explicit addresses.

## [How Each Mode Works# ](#how-each-mode-works)

### [Open Access# ](#open-access)

code 

```
User visits the agent
  -> No auth card
  -> Greeting fires immediately
  -> User chats anonymously
```

Zero friction. Right for a QR code on a wall plate in a conference room: scan, get help, walk out. You can still capture an email mid-conversation with the `collectEmail` tool in your system prompt if you want.

### [Encouraged Sign-up# ](#encouraged-sign-up)

code 

```
User visits the agent
  -> Signup form shown (dismissible)
  -> User can sign up OR dismiss and chat as guest
  -> Either way, conversation starts
```

The signup form is the first message. Users who dismiss it see a small banner ("Sign in to save your progress") but can still chat. Useful when you want to capture dealer contact info without slamming the door on first-time visitors.

### [Required Sign-up# ](#required-sign-up)

code 

```
User visits the agent
  -> Signup form shown (not dismissible)
  -> Chat input disabled until authenticated
  -> User signs up or logs in
  -> Greeting fires and chat is active
```

Users must create an account or log in before they can send anything. The chat input is disabled until auth completes. Right when the agent uses User Memory or pulls per-user data (a tech's own assigned rooms, an SE's own pipeline).

### [Restricted Access# ](#restricted-access)

code 

```
User visits the agent
  -> Signup form shown (not dismissible)
  -> Chat input disabled
  -> User signs up with email
  -> Email is checked against whitelist or domain
  -> If approved: access granted
  -> If not: "Email not allowed" error
```

Same as Required, plus email validation. Only pre-approved emails or emails matching your allowed domain get in. Right for an internal AV ops tool, a single-client portal, or a dealer-only agent.

## [HIPAA Mode# ](#hipaa-mode)

When **HIPAA mode** is enabled in the Access tab, the auth mode is locked down:

-   **Open** and **Encouraged** are disabled.
-   Only **Required** or **Restricted** are allowed.
-   Every interaction is authenticated, which helps with compliance.

Useful for healthcare AV environments (hospital boardrooms, telemedicine suites) where any patient-adjacent content needs to be tracked.

## [In-Chat Authentication# ](#in-chat-authentication)

Authentication happens inside the chat. There is no separate login page. Users see a multi-view auth card that supports:

-   **Signup** with email and password.
-   **Login** for returning users.
-   **OTP verification** via email code.
-   **Forgot password** and reset flow.

The auth card appears as a synthetic assistant message so users stay in the conversation.

## [Redirect After Signup# ](#redirect-after-signup)

For any auth mode, you can set an optional **redirect URL**. After successful signup, the user is sent to that URL before returning to chat. Useful for:

-   Onboarding (a "how this AI helpdesk works" page).
-   Terms of service acceptance.
-   A payment page.
-   A branded welcome experience.

## [Use Cases# ](#use-cases)

Mode

Scenario

**Open**

A QR code in every conference room that lets anyone in the room get instant AV help. A public spec-sheet bot for design firms.

**Encouraged**

A dealer-facing agent where you want to capture leads but never block first-time visitors.

**Required**

A field-tech assistant that pulls each tech's own ServiceNow tickets. A managed-services helpdesk that uses User Memory.

**Restricted**

An internal Crestron-programmer assistant for staff only. A single-client portal locked to that client's email domain.

\*AVCodex · Your AV expertise. Amplified by AI.\*

Was this helpful? 

[Edit this page →](#)

[

Previous

Consumer Monetization

](/docs/guides/consumer-monetization)[

Next

Bring Your Own Auth

](/docs/guides/bring-your-own-auth)

On this page

-   [The Four Auth Modes](#the-four-auth-modes)
-   [Configuring Access Control](#configuring-access-control)
-   [How Each Mode Works](#how-each-mode-works)
-   [Open Access](#open-access)
-   [Encouraged Sign-up](#encouraged-sign-up)
-   [Required Sign-up](#required-sign-up)
-   [Restricted Access](#restricted-access)
-   [HIPAA Mode](#hipaa-mode)
-   [In-Chat Authentication](#in-chat-authentication)
-   [Redirect After Signup](#redirect-after-signup)
-   [Use Cases](#use-cases)

[](/)

The AI platform built exclusively for professional AV. Build, deploy, and sell AI tools that understand your industry.

### Platform

-   What You Can Build
-   Templates
-   [Pricing](/pricing)

### Services

-   [Done-For-You](/pricing)
-   [Academy](/academy)
-   [Contact](/contact)

### Company

-   About
-   [The Signal](/blog)
-   [Docs](/docs)
-   [LinkedIn](#)

© 2026 AVCodex. A Future Ready Holdings Inc. product. SOC 2 Type II Certified · HIPAA Compliant